<!DOCTYPE html><html lang="zh-CN" data-theme="light"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><title>Wireshark Lab: ICMP v7.0 | A君的秘密基地</title><meta name="keywords" content="Wireshark Lab"><meta name="author" content="astralcon"><meta name="copyright" content="astralcon"><meta name="format-detection" content="telephone=no"><meta name="theme-color" content="#ffffff"><meta name="description" content="# 实验文件地址 Wireshark Lab: ICMP v7.0 ICMP: 被主机和路由器用来彼此沟通网络层的信息。最典型的应用是 差错报告。  ICMP and Ping  Question &amp; AnswerWhat is the IP address of your host? What is the IP address of the destination host? Why">
<meta property="og:type" content="article">
<meta property="og:title" content="Wireshark Lab: ICMP v7.0">
<meta property="og:url" content="https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/index.html">
<meta property="og:site_name" content="A君的秘密基地">
<meta property="og:description" content="# 实验文件地址 Wireshark Lab: ICMP v7.0 ICMP: 被主机和路由器用来彼此沟通网络层的信息。最典型的应用是 差错报告。  ICMP and Ping  Question &amp; AnswerWhat is the IP address of your host? What is the IP address of the destination host? Why">
<meta property="og:locale" content="zh_CN">
<meta property="og:image" content="">
<meta property="article:published_time" content="2022-05-14T07:16:41.000Z">
<meta property="article:modified_time" content="2022-05-14T07:17:47.717Z">
<meta property="article:author" content="astralcon">
<meta property="article:tag" content="Wireshark Lab">
<meta name="twitter:card" content="summary">
<meta name="twitter:image" content=""><link rel="shortcut icon" href="/blog/img/avatar.jpg"><link rel="canonical" href="https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/"><link rel="preconnect" href="//cdn.jsdelivr.net"/><link rel="preconnect" href="//busuanzi.ibruce.info"/><link rel="stylesheet" href="/blog/css/index.css"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6/css/all.min.css" media="print" onload="this.media='all'"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.css" media="print" onload="this.media='all'"><script>const GLOBAL_CONFIG = { 
  root: '/blog/',
  algolia: {"appId":"YUB0ZFWBBL","apiKey":"78d0f1fae31a1df3e0cb573725c55558","indexName":"blog","hits":{"per_page":6},"languages":{"input_placeholder":"搜索文章","hits_empty":"找不到您查询的内容：${query}","hits_stats":"找到 ${hits} 条结果，用时 ${time} 毫秒"}},
  localSearch: undefined,
  translate: undefined,
  noticeOutdate: undefined,
  highlight: {"plugin":"highlighjs","highlightCopy":true,"highlightLang":true,"highlightHeightLimit":false},
  copy: {
    success: '复制成功',
    error: '复制错误',
    noSupport: '浏览器不支持'
  },
  relativeDate: {
    homepage: false,
    post: false
  },
  runtime: '天',
  date_suffix: {
    just: '刚刚',
    min: '分钟前',
    hour: '小时前',
    day: '天前',
    month: '个月前'
  },
  copyright: undefined,
  lightbox: 'fancybox',
  Snackbar: undefined,
  source: {
    justifiedGallery: {
      js: 'https://cdn.jsdelivr.net/npm/flickr-justified-gallery@2/dist/fjGallery.min.js',
      css: 'https://cdn.jsdelivr.net/npm/flickr-justified-gallery@2/dist/fjGallery.min.css'
    }
  },
  isPhotoFigcaption: false,
  islazyload: false,
  isAnchor: false
}</script><script id="config-diff">var GLOBAL_CONFIG_SITE = {
  title: 'Wireshark Lab: ICMP v7.0',
  isPost: true,
  isHome: false,
  isHighlightShrink: false,
  isToc: true,
  postUpdate: '2022-05-14 15:17:47'
}</script><noscript><style type="text/css">
  #nav {
    opacity: 1
  }
  .justified-gallery img {
    opacity: 1
  }

  #recent-posts time,
  #post-meta time {
    display: inline !important
  }
</style></noscript><script>(win=>{
    win.saveToLocal = {
      set: function setWithExpiry(key, value, ttl) {
        if (ttl === 0) return
        const now = new Date()
        const expiryDay = ttl * 86400000
        const item = {
          value: value,
          expiry: now.getTime() + expiryDay,
        }
        localStorage.setItem(key, JSON.stringify(item))
      },

      get: function getWithExpiry(key) {
        const itemStr = localStorage.getItem(key)

        if (!itemStr) {
          return undefined
        }
        const item = JSON.parse(itemStr)
        const now = new Date()

        if (now.getTime() > item.expiry) {
          localStorage.removeItem(key)
          return undefined
        }
        return item.value
      }
    }
  
    win.getScript = url => new Promise((resolve, reject) => {
      const script = document.createElement('script')
      script.src = url
      script.async = true
      script.onerror = reject
      script.onload = script.onreadystatechange = function() {
        const loadState = this.readyState
        if (loadState && loadState !== 'loaded' && loadState !== 'complete') return
        script.onload = script.onreadystatechange = null
        resolve()
      }
      document.head.appendChild(script)
    })
  
      win.activateDarkMode = function () {
        document.documentElement.setAttribute('data-theme', 'dark')
        if (document.querySelector('meta[name="theme-color"]') !== null) {
          document.querySelector('meta[name="theme-color"]').setAttribute('content', '#0d0d0d')
        }
      }
      win.activateLightMode = function () {
        document.documentElement.setAttribute('data-theme', 'light')
        if (document.querySelector('meta[name="theme-color"]') !== null) {
          document.querySelector('meta[name="theme-color"]').setAttribute('content', '#ffffff')
        }
      }
      const t = saveToLocal.get('theme')
    
          if (t === 'dark') activateDarkMode()
          else if (t === 'light') activateLightMode()
        
      const asideStatus = saveToLocal.get('aside-status')
      if (asideStatus !== undefined) {
        if (asideStatus === 'hide') {
          document.documentElement.classList.add('hide-aside')
        } else {
          document.documentElement.classList.remove('hide-aside')
        }
      }
    
    const detectApple = () => {
      if(/iPad|iPhone|iPod|Macintosh/.test(navigator.userAgent)){
        document.documentElement.classList.add('apple')
      }
    }
    detectApple()
    })(window)</script><meta name="generator" content="Hexo 6.2.0"></head><body><div id="loading-box"><div class="loading-left-bg"></div><div class="loading-right-bg"></div><div class="spinner-box"><div class="configure-border-1"><div class="configure-core"></div></div><div class="configure-border-2"><div class="configure-core"></div></div><div class="loading-word">加载中...</div></div></div><div id="sidebar"><div id="menu-mask"></div><div id="sidebar-menus"><div class="avatar-img is-center"><img src="/blog/img/avatar.jpg" onerror="onerror=null;src='/img/friend_404.gif'" alt="avatar"/></div><div class="sidebar-site-data site-data is-center"><a href="/blog/archives/"><div class="headline">文章</div><div class="length-num">27</div></a><a href="/blog/tags/"><div class="headline">标签</div><div class="length-num">4</div></a><a href="/blog/categories/"><div class="headline">分类</div><div class="length-num">3</div></a></div><hr/><div class="menus_items"><div class="menus_item"><a class="site-page" href="/blog/"><i class="fa-fw fas fa-home"></i><span> 首頁</span></a></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fa fa-folder-open"></i><span> 目录</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/blog/archives/"><i class="fa-fw fas fa-archive"></i><span> 归档</span></a></li><li><a class="site-page child" href="/blog/tags/"><i class="fa-fw fas fa-tags"></i><span> 标签</span></a></li><li><a class="site-page child" href="/blog/categories/"><i class="fa-fw fas fa-folder-open"></i><span> 分类</span></a></li></ul></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fa fa-heartbeat"></i><span> 清单</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/blog/game/"><i class="fa-fw fas fa-gamepad"></i><span> 游戏</span></a></li><li><a class="site-page child" href="/blog/book/"><i class="fa-fw fas fa-book"></i><span> 书籍</span></a></li></ul></div><div class="menus_item"><a class="site-page" href="/blog/link/"><i class="fa-fw fas fa-link"></i><span> 友链</span></a></div><div class="menus_item"><a class="site-page" href="/blog/about/"><i class="fa-fw fas fa-heart"></i><span> 关于</span></a></div></div></div></div><div class="post" id="body-wrap"><header class="post-bg" id="page-header" style="background-image: url('')"><nav id="nav"><span id="blog_name"><a id="site-name" href="/blog/">A君的秘密基地</a></span><div id="menus"><div id="search-button"><a class="site-page social-icon search"><i class="fas fa-search fa-fw"></i><span> 搜索</span></a></div><div class="menus_items"><div class="menus_item"><a class="site-page" href="/blog/"><i class="fa-fw fas fa-home"></i><span> 首頁</span></a></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fa fa-folder-open"></i><span> 目录</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/blog/archives/"><i class="fa-fw fas fa-archive"></i><span> 归档</span></a></li><li><a class="site-page child" href="/blog/tags/"><i class="fa-fw fas fa-tags"></i><span> 标签</span></a></li><li><a class="site-page child" href="/blog/categories/"><i class="fa-fw fas fa-folder-open"></i><span> 分类</span></a></li></ul></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fa fa-heartbeat"></i><span> 清单</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/blog/game/"><i class="fa-fw fas fa-gamepad"></i><span> 游戏</span></a></li><li><a class="site-page child" href="/blog/book/"><i class="fa-fw fas fa-book"></i><span> 书籍</span></a></li></ul></div><div class="menus_item"><a class="site-page" href="/blog/link/"><i class="fa-fw fas fa-link"></i><span> 友链</span></a></div><div class="menus_item"><a class="site-page" href="/blog/about/"><i class="fa-fw fas fa-heart"></i><span> 关于</span></a></div></div><div id="toggle-menu"><a class="site-page"><i class="fas fa-bars fa-fw"></i></a></div></div></nav><div id="post-info"><h1 class="post-title">Wireshark Lab: ICMP v7.0</h1><div id="post-meta"><div class="meta-firstline"><span class="post-meta-date"><i class="far fa-calendar-alt fa-fw post-meta-icon"></i><span class="post-meta-label">发表于</span><time class="post-meta-date-created" datetime="2022-05-14T07:16:41.000Z" title="发表于 2022-05-14 15:16:41">2022-05-14</time><span class="post-meta-separator">|</span><i class="fas fa-history fa-fw post-meta-icon"></i><span class="post-meta-label">更新于</span><time class="post-meta-date-updated" datetime="2022-05-14T07:17:47.717Z" title="更新于 2022-05-14 15:17:47">2022-05-14</time></span><span class="post-meta-categories"><span class="post-meta-separator">|</span><i class="fas fa-inbox fa-fw post-meta-icon"></i><a class="post-meta-categories" href="/blog/categories/Computer-Network/">Computer Network</a></span></div><div class="meta-secondline"><span class="post-meta-separator">|</span><span class="post-meta-commentcount"><i class="far fa-comments fa-fw post-meta-icon"></i><span class="post-meta-label">评论数:</span><a href="/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/#post-comment" itemprop="discussionUrl"><span class="valine-comment-count" data-xid="/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/" itemprop="commentCount"></span></a></span></div></div></div></header><main class="layout" id="content-inner"><div id="post"><article class="post-content" id="article-container"><p>﻿# 实验文件地址</p>
<p><a target="_blank" rel="noopener" href="http://www-net.cs.umass.edu/wireshark-labs/Wireshark_ICMP_v7.0.pdf">Wireshark Lab: ICMP v7.0</a><br><font color=red> ICMP: </font>被主机和路由器用来彼此沟通网络层的信息。最典型的应用是<font color=red> 差错报告</font>。</p>
<p><img src="https://img-blog.csdnimg.cn/20201117135111355.jpg?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h1 id="ICMP-and-Ping"><a href="#ICMP-and-Ping" class="headerlink" title="ICMP and Ping"></a>ICMP and Ping</h1><p><img src="https://img-blog.csdnimg.cn/20201117140051836.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br><img src="https://img-blog.csdnimg.cn/20201117141002780.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<p><img src="https://img-blog.csdnimg.cn/20201117140938471.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h2 id="Question-amp-Answer"><a href="#Question-amp-Answer" class="headerlink" title="Question &amp; Answer"></a>Question &amp; Answer</h2><h4 id="What-is-the-IP-address-of-your-host-What-is-the-IP-address-of-the-destination-host"><a href="#What-is-the-IP-address-of-your-host-What-is-the-IP-address-of-the-destination-host" class="headerlink" title="What is the IP address of your host? What is the IP address of the destination host?"></a>What is the IP address of your host? What is the IP address of the destination host?</h4><p><img src="https://img-blog.csdnimg.cn/20201117141211328.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h4 id="Why-is-it-that-an-ICMP-packet-does-not-have-source-and-destination-port-numbers"><a href="#Why-is-it-that-an-ICMP-packet-does-not-have-source-and-destination-port-numbers" class="headerlink" title="Why is it that an ICMP packet does not have source and destination port numbers?"></a>Why is it that an ICMP packet does not have source and destination port numbers?</h4><p>ICMP是<font color=red>网络层协议</font>，端口是应用层协议才有的东西。</p>
<h4 id="Examine-one-of-the-ping-request-packets-sent-by-your-host-What-are-the-ICMP-type-and-code-numbers-What-other-fields-does-this-ICMP-packet-have-How-many-bytes-are-the-checksum-sequence-number-and-identifier-fields"><a href="#Examine-one-of-the-ping-request-packets-sent-by-your-host-What-are-the-ICMP-type-and-code-numbers-What-other-fields-does-this-ICMP-packet-have-How-many-bytes-are-the-checksum-sequence-number-and-identifier-fields" class="headerlink" title="Examine one of the ping request packets sent by your host. What are the ICMP type and code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?"></a>Examine one of the ping request packets sent by your host. What are the ICMP type and code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?</h4><p><img src="https://img-blog.csdnimg.cn/20201117141512343.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<p><font color=red>ICMP的type为request(128)，编号为0。</font></p>
<p><img src="https://img-blog.csdnimg.cn/20201117141832998.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br><font color=red>Checksum大小为16字节。</font></p>
<p><img src="https://img-blog.csdnimg.cn/20201117141917338.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br><font color=red>Sequence大小为16字节。</font></p>
<p><img src="https://img-blog.csdnimg.cn/202011171420046.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br><font color=red>Identifier大小为16字节。</font></p>
<h4 id="Examine-the-corresponding-ping-reply-packet-What-are-the-ICMP-type-and-code-numbers-What-other-fields-does-this-ICMP-packet-have-How-many-bytes-are-the-checksum-sequence-number-and-identifier-fields"><a href="#Examine-the-corresponding-ping-reply-packet-What-are-the-ICMP-type-and-code-numbers-What-other-fields-does-this-ICMP-packet-have-How-many-bytes-are-the-checksum-sequence-number-and-identifier-fields" class="headerlink" title="Examine the corresponding ping reply packet. What are the ICMP type and code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?"></a>Examine the corresponding ping reply packet. What are the ICMP type and code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?</h4><p><img src="https://img-blog.csdnimg.cn/20201117142337301.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<p><font color=red>ICMP的type为reply(129)，编号为0。</font><br><font color=red>Checksum、Sequence、Identifier都是16字节（可以自己验证）。</font></p>
<h1 id="ICMP-and-Traceroute"><a href="#ICMP-and-Traceroute" class="headerlink" title="ICMP and Traceroute"></a>ICMP and Traceroute</h1><p><img src="https://img-blog.csdnimg.cn/20201117143355385.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br><img src="https://img-blog.csdnimg.cn/20201117143418644.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h2 id="Question-amp-Answer-1"><a href="#Question-amp-Answer-1" class="headerlink" title="Question &amp; Answer"></a>Question &amp; Answer</h2><h4 id="What-is-the-IP-address-of-your-host-What-is-the-IP-address-of-the-target-destination-host"><a href="#What-is-the-IP-address-of-your-host-What-is-the-IP-address-of-the-target-destination-host" class="headerlink" title="What is the IP address of your host? What is the IP address of the target destination host?"></a>What is the IP address of your host? What is the IP address of the target destination host?</h4><p><img src="https://img-blog.csdnimg.cn/20201117143602155.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"></p>
<h4 id="If-ICMP-sent-UDP-packets-instead-as-in-Unix-x2F-Linux-would-the-IP-protocol-number-still-be-01-for-the-probe-packets-If-not-what-would-it-be"><a href="#If-ICMP-sent-UDP-packets-instead-as-in-Unix-x2F-Linux-would-the-IP-protocol-number-still-be-01-for-the-probe-packets-If-not-what-would-it-be" class="headerlink" title="If ICMP sent UDP packets instead (as in Unix&#x2F;Linux), would the IP protocol number still be 01 for the probe packets? If not, what would it be?"></a>If ICMP sent UDP packets instead (as in Unix&#x2F;Linux), would the IP protocol number still be 01 for the probe packets? If not, what would it be?</h4><p><font color=red> 不清楚….</font></p>
<h4 id="Examine-the-ICMP-echo-packet-in-your-screenshot-Is-this-different-from-the-ICMP-ping-query-packets-in-the-first-half-of-this-lab-If-yes-how-so"><a href="#Examine-the-ICMP-echo-packet-in-your-screenshot-Is-this-different-from-the-ICMP-ping-query-packets-in-the-first-half-of-this-lab-If-yes-how-so" class="headerlink" title="Examine the ICMP echo packet in your screenshot. Is this different from the ICMP ping query packets in the first half of this lab? If yes, how so?"></a>Examine the ICMP echo packet in your screenshot. Is this different from the ICMP ping query packets in the first half of this lab? If yes, how so?</h4><p><img src="https://img-blog.csdnimg.cn/20201117144219926.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br>主要的不同就是<font color = red>No response seen</font>，你可以检验一下上一小节的请求包。</p>
<h4 id="Examine-the-ICMP-error-packet-in-your-screenshot-It-has-more-fields-than-the-ICMP-echo-packet-What-is-included-in-those-fields"><a href="#Examine-the-ICMP-error-packet-in-your-screenshot-It-has-more-fields-than-the-ICMP-echo-packet-What-is-included-in-those-fields" class="headerlink" title="Examine the ICMP error packet in your screenshot. It has more fields than the ICMP echo packet. What is included in those fields?"></a>Examine the ICMP error packet in your screenshot. It has more fields than the ICMP echo packet. What is included in those fields?</h4><p><img src="https://img-blog.csdnimg.cn/20201117144621207.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br>可以看到在错误包的<font color=red>IMCP中包含了原始IP和上层端口号ICMP的信息。</font></p>
<h4 id="Examine-the-last-three-ICMP-packets-received-by-the-source-host-How-are-these-packets-different-from-the-ICMP-error-packets-Why-are-they-different"><a href="#Examine-the-last-three-ICMP-packets-received-by-the-source-host-How-are-these-packets-different-from-the-ICMP-error-packets-Why-are-they-different" class="headerlink" title="Examine the last three ICMP packets received by the source host. How are these packets different from the ICMP error packets? Why are they different?"></a>Examine the last three ICMP packets received by the source host. How are these packets different from the ICMP error packets? Why are they different?</h4><p><img src="https://img-blog.csdnimg.cn/20201117145039883.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br>以红框标出的就是源主机收到的最后三个ICMP包。与错误包相比，它的ICMP协议中不包含原始IP和ICMP。</p>
<h4 id="Within-the-tracert-measurements-is-there-a-link-whose-delay-is-significantly-longer-than-others-Refer-to-the-screenshot-in-Figure-4-is-there-a-link-whose-delay-is-significantly-longer-than-others-On-the-basis-of-the-router-names-can-you-guess-the-location-of-the-two-routers-on-the-end-of-this-link"><a href="#Within-the-tracert-measurements-is-there-a-link-whose-delay-is-significantly-longer-than-others-Refer-to-the-screenshot-in-Figure-4-is-there-a-link-whose-delay-is-significantly-longer-than-others-On-the-basis-of-the-router-names-can-you-guess-the-location-of-the-two-routers-on-the-end-of-this-link" class="headerlink" title="Within the tracert measurements, is there a link whose delay is significantly longer than others? Refer to the screenshot in Figure 4, is there a link whose delay is significantly longer than others? On the basis of the router names, can you guess the location of the two routers on the end of this link?"></a>Within the tracert measurements, is there a link whose delay is significantly longer than others? Refer to the screenshot in Figure 4, is there a link whose delay is significantly longer than others? On the basis of the router names, can you guess the location of the two routers on the end of this link?</h4><p><img src="https://img-blog.csdnimg.cn/20201117145510222.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl81MTcwMzE3NA==,size_16,color_FFFFFF,t_70#pic_center" alt="在这里插入图片描述"><br>我们看一下上图，<font color=red>第5个链路</font>延迟明显高于其他链路。<br>这条链路的头路由器应该就是我们的源主机，尾路由器就是目的主机。</p>
</article><div class="post-copyright"><div class="post-copyright__author"><span class="post-copyright-meta">文章作者: </span><span class="post-copyright-info"><a href="https://astralcon.gitee.io/blog">astralcon</a></span></div><div class="post-copyright__type"><span class="post-copyright-meta">文章链接: </span><span class="post-copyright-info"><a href="https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/">https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/</a></span></div><div class="post-copyright__notice"><span class="post-copyright-meta">版权声明: </span><span class="post-copyright-info">本博客所有文章除特别声明外，均采用 <a href="https://creativecommons.org/licenses/by-nc-sa/4.0/" target="_blank">CC BY-NC-SA 4.0</a> 许可协议。转载请注明来自 <a href="https://astralcon.gitee.io/blog" target="_blank">A君的秘密基地</a>！</span></div></div><div class="tag_share"><div class="post-meta__tag-list"><a class="post-meta__tags" href="/blog/tags/Wireshark-Lab/">Wireshark Lab</a></div><div class="post_share"><div class="social-share" data-image="" data-sites="facebook,twitter,wechat,weibo,qq"></div><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/social-share.js/dist/css/share.min.css" media="print" onload="this.media='all'"><script src="https://cdn.jsdelivr.net/gh/overtrue/share.js@master/dist/js/social-share.min.js" defer></script></div></div><div class="post-reward"><div class="reward-button"><i class="fas fa-qrcode"></i> 打赏</div><div class="reward-main"><ul class="reward-all"><li class="reward-item"><a href="/blog/img/wechat.jpg" target="_blank"><img class="post-qr-code-img" src="/blog/img/wechat.jpg" alt="微信"/></a><div class="post-qr-code-desc">微信</div></li><li class="reward-item"><a href="/blog/img/alipay.jpg" target="_blank"><img class="post-qr-code-img" src="/blog/img/alipay.jpg" alt="支付宝"/></a><div class="post-qr-code-desc">支付宝</div></li></ul></div></div><nav class="pagination-post" id="pagination"><div class="prev-post pull-left"><a href="/blog/2022/05/14/Wireshark-Lab-Ethernet-and-ARP-v7-0/"><img class="prev-cover" src="" onerror="onerror=null;src='/blog/img/404.jpg'" alt="cover of previous post"><div class="pagination-info"><div class="label">上一篇</div><div class="prev_info">Wireshark Lab: Ethernet and ARP v7.0</div></div></a></div><div class="next-post pull-right"><a href="/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/"><img class="next-cover" src="" onerror="onerror=null;src='/blog/img/404.jpg'" alt="cover of next post"><div class="pagination-info"><div class="label">下一篇</div><div class="next_info">Wireshark Lab: NAT v7.0</div></div></a></div></nav><div class="relatedPosts"><div class="headline"><i class="fas fa-thumbs-up fa-fw"></i><span>相关推荐</span></div><div class="relatedPosts-list"><div><a href="/blog/2022/05/14/Wireshark-Lab-DHCP-v7-0/" title="Wireshark Lab: DHCP v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: DHCP v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-DNS-v7-0/" title="Wireshark Lab: DNS v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: DNS v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-HTTP-v7-0/" title="Wireshark Lab: HTTP v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: HTTP v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-Ethernet-and-ARP-v7-0/" title="Wireshark Lab: Ethernet and ARP v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: Ethernet and ARP v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-IP-v7-0/" title="Wireshark Lab: IP v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: IP v7.0</div></div></a></div><div><a href="/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/" title="Wireshark Lab: NAT v7.0"><img class="cover" src="" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2022-05-14</div><div class="title">Wireshark Lab: NAT v7.0</div></div></a></div></div></div><hr/><div id="post-comment"><div class="comment-head"><div class="comment-headline"><i class="fas fa-comments fa-fw"></i><span> 评论</span></div><div id="comment-switch"><span class="first-comment">Valine</span><span class="switch-btn"></span><span class="second-comment">Disqus</span></div></div><div class="comment-wrap"><div><div class="vcomment" id="vcomment"></div></div><div><div id="disqus_thread"></div></div></div></div></div><div class="aside-content" id="aside-content"><div class="card-widget card-info"><div class="is-center"><div class="avatar-img"><img src="/blog/img/avatar.jpg" onerror="this.onerror=null;this.src='/blog/img/friend_404.gif'" alt="avatar"/></div><div class="author-info__name">astralcon</div><div class="author-info__description">slow is fast.</div></div><div class="card-info-data site-data is-center"><a href="/blog/archives/"><div class="headline">文章</div><div class="length-num">27</div></a><a href="/blog/tags/"><div class="headline">标签</div><div class="length-num">4</div></a><a href="/blog/categories/"><div class="headline">分类</div><div class="length-num">3</div></a></div><div class="card-info-social-icons is-center"><a class="social-icon" href="https://github.com/astralcon" target="_blank" title="Github"><i class="fab fa-github"></i></a><a class="social-icon" href="mailto:a842181471@qq.com.com" target="_blank" title="Email"><i class="fas fa-envelope"></i></a></div></div><div class="card-widget card-announcement"><div class="item-headline"><i class="fas fa-bullhorn fa-shake"></i><span>公告</span></div><div class="announcement_content">朝九晚五，健康生活！</div></div><div class="sticky_layout"><div class="card-widget" id="card-toc"><div class="item-headline"><i class="fas fa-stream"></i><span>目录</span><span class="toc-percentage"></span></div><div class="toc-content"><ol class="toc"><li class="toc-item toc-level-1"><a class="toc-link" href="#ICMP-and-Ping"><span class="toc-number">1.</span> <span class="toc-text">ICMP and Ping</span></a><ol class="toc-child"><li class="toc-item toc-level-2"><a class="toc-link" href="#Question-amp-Answer"><span class="toc-number">1.1.</span> <span class="toc-text">Question &amp; Answer</span></a><ol class="toc-child"><li class="toc-item toc-level-4"><a class="toc-link" href="#What-is-the-IP-address-of-your-host-What-is-the-IP-address-of-the-destination-host"><span class="toc-number">1.1.0.1.</span> <span class="toc-text">What is the IP address of your host? What is the IP address of the destination host?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Why-is-it-that-an-ICMP-packet-does-not-have-source-and-destination-port-numbers"><span class="toc-number">1.1.0.2.</span> <span class="toc-text">Why is it that an ICMP packet does not have source and destination port numbers?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Examine-one-of-the-ping-request-packets-sent-by-your-host-What-are-the-ICMP-type-and-code-numbers-What-other-fields-does-this-ICMP-packet-have-How-many-bytes-are-the-checksum-sequence-number-and-identifier-fields"><span class="toc-number">1.1.0.3.</span> <span class="toc-text">Examine one of the ping request packets sent by your host. What are the ICMP type and code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Examine-the-corresponding-ping-reply-packet-What-are-the-ICMP-type-and-code-numbers-What-other-fields-does-this-ICMP-packet-have-How-many-bytes-are-the-checksum-sequence-number-and-identifier-fields"><span class="toc-number">1.1.0.4.</span> <span class="toc-text">Examine the corresponding ping reply packet. What are the ICMP type and code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?</span></a></li></ol></li></ol></li></ol></li><li class="toc-item toc-level-1"><a class="toc-link" href="#ICMP-and-Traceroute"><span class="toc-number">2.</span> <span class="toc-text">ICMP and Traceroute</span></a><ol class="toc-child"><li class="toc-item toc-level-2"><a class="toc-link" href="#Question-amp-Answer-1"><span class="toc-number">2.1.</span> <span class="toc-text">Question &amp; Answer</span></a><ol class="toc-child"><li class="toc-item toc-level-4"><a class="toc-link" href="#What-is-the-IP-address-of-your-host-What-is-the-IP-address-of-the-target-destination-host"><span class="toc-number">2.1.0.1.</span> <span class="toc-text">What is the IP address of your host? What is the IP address of the target destination host?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#If-ICMP-sent-UDP-packets-instead-as-in-Unix-x2F-Linux-would-the-IP-protocol-number-still-be-01-for-the-probe-packets-If-not-what-would-it-be"><span class="toc-number">2.1.0.2.</span> <span class="toc-text">If ICMP sent UDP packets instead (as in Unix&#x2F;Linux), would the IP protocol number still be 01 for the probe packets? If not, what would it be?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Examine-the-ICMP-echo-packet-in-your-screenshot-Is-this-different-from-the-ICMP-ping-query-packets-in-the-first-half-of-this-lab-If-yes-how-so"><span class="toc-number">2.1.0.3.</span> <span class="toc-text">Examine the ICMP echo packet in your screenshot. Is this different from the ICMP ping query packets in the first half of this lab? If yes, how so?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Examine-the-ICMP-error-packet-in-your-screenshot-It-has-more-fields-than-the-ICMP-echo-packet-What-is-included-in-those-fields"><span class="toc-number">2.1.0.4.</span> <span class="toc-text">Examine the ICMP error packet in your screenshot. It has more fields than the ICMP echo packet. What is included in those fields?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Examine-the-last-three-ICMP-packets-received-by-the-source-host-How-are-these-packets-different-from-the-ICMP-error-packets-Why-are-they-different"><span class="toc-number">2.1.0.5.</span> <span class="toc-text">Examine the last three ICMP packets received by the source host. How are these packets different from the ICMP error packets? Why are they different?</span></a></li><li class="toc-item toc-level-4"><a class="toc-link" href="#Within-the-tracert-measurements-is-there-a-link-whose-delay-is-significantly-longer-than-others-Refer-to-the-screenshot-in-Figure-4-is-there-a-link-whose-delay-is-significantly-longer-than-others-On-the-basis-of-the-router-names-can-you-guess-the-location-of-the-two-routers-on-the-end-of-this-link"><span class="toc-number">2.1.0.6.</span> <span class="toc-text">Within the tracert measurements, is there a link whose delay is significantly longer than others? Refer to the screenshot in Figure 4, is there a link whose delay is significantly longer than others? On the basis of the router names, can you guess the location of the two routers on the end of this link?</span></a></li></ol></li></ol></li></ol></li></ol></div></div><div class="card-widget card-recent-post"><div class="item-headline"><i class="fas fa-history"></i><span>最新文章</span></div><div class="aside-list"><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/17/%E3%80%8A%E7%AE%97%E6%B3%95%E8%AE%BE%E8%AE%A1%E6%89%8B%E5%86%8C%E3%80%8B%E9%9D%A2%E8%AF%95%E9%A2%98%EF%BC%9AChapter-1/" title="《算法设计手册》面试题：Chapter 1">《算法设计手册》面试题：Chapter 1</a><time datetime="2022-05-17T07:35:05.000Z" title="发表于 2022-05-17 15:35:05">2022-05-17</time></div></div><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/14/Wireshark-Lab-DHCP-v7-0/" title="Wireshark Lab: DHCP v7.0">Wireshark Lab: DHCP v7.0</a><time datetime="2022-05-14T07:19:53.000Z" title="发表于 2022-05-14 15:19:53">2022-05-14</time></div></div><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/14/Wireshark-Lab-Ethernet-and-ARP-v7-0/" title="Wireshark Lab: Ethernet and ARP v7.0">Wireshark Lab: Ethernet and ARP v7.0</a><time datetime="2022-05-14T07:18:10.000Z" title="发表于 2022-05-14 15:18:10">2022-05-14</time></div></div><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/" title="Wireshark Lab: ICMP v7.0">Wireshark Lab: ICMP v7.0</a><time datetime="2022-05-14T07:16:41.000Z" title="发表于 2022-05-14 15:16:41">2022-05-14</time></div></div><div class="aside-list-item no-cover"><div class="content"><a class="title" href="/blog/2022/05/14/Wireshark-Lab-NAT-v7-0/" title="Wireshark Lab: NAT v7.0">Wireshark Lab: NAT v7.0</a><time datetime="2022-05-14T07:15:13.000Z" title="发表于 2022-05-14 15:15:13">2022-05-14</time></div></div></div></div></div></div></main><footer id="footer"><div id="footer-wrap"><div class="copyright">&copy;2022 By astralcon</div><div class="framework-info"><span>框架 </span><a target="_blank" rel="noopener" href="https://hexo.io">Hexo</a><span class="footer-separator">|</span><span>主题 </span><a target="_blank" rel="noopener" href="https://github.com/jerryc127/hexo-theme-butterfly">Butterfly</a></div></div></footer></div><div id="rightside"><div id="rightside-config-hide"><button id="readmode" type="button" title="阅读模式"><i class="fas fa-book-open"></i></button><button id="darkmode" type="button" title="浅色和深色模式转换"><i class="fas fa-adjust"></i></button><button id="hide-aside-btn" type="button" title="单栏和双栏切换"><i class="fas fa-arrows-alt-h"></i></button></div><div id="rightside-config-show"><button id="rightside_config" type="button" title="设置"><i class="fas fa-cog fa-spin"></i></button><button class="close" id="mobile-toc-button" type="button" title="目录"><i class="fas fa-list-ul"></i></button><a id="to_comment" href="#post-comment" title="直达评论"><i class="fas fa-comments"></i></a><button id="go-up" type="button" title="回到顶部"><i class="fas fa-arrow-up"></i></button></div></div><div id="algolia-search"><div class="search-dialog"><nav class="search-nav"><span class="search-dialog-title">搜索</span><button class="search-close-button"><i class="fas fa-times"></i></button></nav><div class="search-wrap"><div id="algolia-search-input"></div><hr/><div id="algolia-search-results"><div id="algolia-hits"></div><div id="algolia-pagination"></div><div id="algolia-info"><div class="algolia-stats"></div><div class="algolia-poweredBy"></div></div></div></div></div><div id="search-mask"></div></div><div><script src="/blog/js/utils.js"></script><script src="/blog/js/main.js"></script><script src="https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.umd.js"></script><script src="https://cdn.jsdelivr.net/npm/algoliasearch@4/dist/algoliasearch-lite.umd.js"></script><script src="https://cdn.jsdelivr.net/npm/instantsearch.js@4/dist/instantsearch.production.min.js"></script><script src="/blog/js/search/algolia.js"></script><script>var preloader = {
  endLoading: () => {
    document.body.style.overflow = 'auto';
    document.getElementById('loading-box').classList.add("loaded")
  },
  initLoading: () => {
    document.body.style.overflow = '';
    document.getElementById('loading-box').classList.remove("loaded")

  }
}
window.addEventListener('load',preloader.endLoading())</script><div class="js-pjax"><script>function loadValine () {
  function initValine () {
    const valine = new Valine(Object.assign({
      el: '#vcomment',
      appId: 'Uh3CYGE2t1Eaz4KoTkyVQv1N-gzGzoHsz',
      appKey: '1Gdg4rGlmT4Dcfv7oNiCH1q3',
      avatar: 'monsterid',
      serverURLs: '',
      emojiMaps: "",
      path: window.location.pathname,
      visitor: false
    }, null))
  }

  if (typeof Valine === 'function') initValine() 
  else getScript('https://cdn.jsdelivr.net/npm/valine/dist/Valine.min.js').then(initValine)
}

if ('Valine' === 'Valine' || !false) {
  if (false) btf.loadComment(document.getElementById('vcomment'),loadValine)
  else setTimeout(loadValine, 0)
} else {
  function loadOtherComment () {
    loadValine()
  }
}</script><script>function loadDisqus () {
  var disqus_config = function () {
    this.page.url = 'https://astralcon.gitee.io/blog/2022/05/14/Wireshark-Lab-ICMP-v7-0/'
    this.page.identifier = '2022/05/14/Wireshark-Lab-ICMP-v7-0/'
    this.page.title = 'Wireshark Lab: ICMP v7.0'
  };

  window.disqusReset = () => {
    DISQUS.reset({
      reload: true,
      config: disqus_config
    })
  }

  if (window.DISQUS) disqusReset()
  else {
    (function() { 
      var d = document, s = d.createElement('script');
      s.src = 'https://.disqus.com/embed.js';
      s.setAttribute('data-timestamp', +new Date());
      (d.head || d.body).appendChild(s);
    })();
  }
}

if ('Valine' === 'Disqus' || !false) {
  if (false) btf.loadComment(document.getElementById('disqus_thread'), loadDisqus)
  else loadDisqus()
} else {
  function loadOtherComment () {
    loadDisqus()
  }
}
</script></div><script async data-pjax src="//busuanzi.ibruce.info/busuanzi/2.3/busuanzi.pure.mini.js"></script></div><script src="/blog/live2dw/lib/L2Dwidget.min.js?094cbace49a39548bed64abff5988b05"></script><script>L2Dwidget.init({"log":false,"pluginJsPath":"lib/","pluginModelPath":"assets/","pluginRootPath":"live2dw/","tagMode":false});</script></body></html>